94.53.1.123 - IPInfo

Basic Info

City: Tamași

Region: Ilfov

Country: Romania

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
94.53.131.207	attack	TCP (SYN) 94.53.131.207:62109 -> port 23, len 44	2020-08-13 03:26:02
94.53.168.189	attackbotsspam	TCP (SYN) 94.53.168.189:57606 -> port 445, len 52	2020-08-13 03:25:47
94.53.166.68	attackbotsspam	Unauthorized connection attempt detected from IP address 94.53.166.68 to port 80	2020-07-07 04:00:53
94.53.193.8	attackbotsspam	Unauthorized connection attempt detected from IP address 94.53.193.8 to port 23	2020-06-09 19:08:19
94.53.142.14	attackbotsspam	Automatic report - Port Scan Attack	2020-06-09 01:22:14
94.53.193.8	attackspam	Unauthorized connection attempt detected from IP address 94.53.193.8 to port 23	2020-05-30 03:04:00
94.53.196.70	attack	May 8 05:08:43 artelis kernel: [2470999.979362] [UFW BLOCK] IN=eth0 OUT= MAC=c2:45:3b:cb:6e:17:ec:38:73:0c:18:30:08:00 SRC=94.53.196.70 DST=167.99.196.43 LEN=40 TOS=0x00 PREC=0x20 TTL=54 ID=60676 PROTO=TCP SPT=9600 DPT=4567 WINDOW=11400 RES=0x00 SYN URGP=0 May 8 05:09:21 artelis kernel: [2471038.211454] [UFW BLOCK] IN=eth0 OUT= MAC=c2:45:3b:cb:6e:17:ec:38:73:0c:18:30:08:00 SRC=94.53.196.70 DST=167.99.196.43 LEN=40 TOS=0x00 PREC=0x20 TTL=54 ID=60676 PROTO=TCP SPT=9600 DPT=4567 WINDOW=11400 RES=0x00 SYN URGP=0 May 8 05:09:28 artelis kernel: [2471044.890662] [UFW BLOCK] IN=eth0 OUT= MAC=c2:45:3b:cb:6e:17:ec:38:73:0c:18:30:08:00 SRC=94.53.196.70 DST=167.99.196.43 LEN=40 TOS=0x00 PREC=0x20 TTL=54 ID=60676 PROTO=TCP SPT=9600 DPT=4567 WINDOW=11400 RES=0x00 SYN URGP=0 May 8 05:09:39 artelis kernel: [2471055.540969] [UFW BLOCK] IN=eth0 OUT= MAC=c2:45:3b:cb:6e:17:ec:38:73:0c:18:30:08:00 SRC=94.53.196.70 DST=167.99.196.43 LEN=40 TOS=0x00 PREC=0x20 TTL=54 ID=60676 PROTO=TCP SPT=9600 DPT=456 ...	2020-05-08 16:58:19
94.53.196.70	attack	Honeypot attack, port: 4567, PTR: 94-53-196-70.next-gen.ro.	2020-04-29 00:20:34
94.53.176.227	attackspambots	port	2020-03-22 06:52:37
94.53.199.250	attackbotsspam	DATE:2020-03-20 14:01:22, IP:94.53.199.250, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq)	2020-03-21 05:01:50
94.53.196.70	attack	Honeypot attack, port: 4567, PTR: 94-53-196-70.next-gen.ro.	2020-03-05 18:07:04
94.53.196.93	attack	Unauthorized connection attempt detected from IP address 94.53.196.93 to port 23 [J]	2020-02-05 17:55:37
94.53.199.106	attackspam	Unauthorized connection attempt detected from IP address 94.53.199.106 to port 81 [J]	2020-01-29 05:18:30
94.53.184.169	attack	Automatic report - Port Scan Attack	2020-01-25 07:34:26
94.53.199.106	attackspambots	Automatic report - Port Scan Attack	2020-01-19 16:59:30

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.53.1.123
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57817
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.53.1.123.			IN	A

;; AUTHORITY SECTION:
.			447	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022122201 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 23 09:12:33 CST 2022
;; MSG SIZE  rcvd: 104

Host info

123.1.53.94.in-addr.arpa domain name pointer 94-53-1-123.next-gen.ro.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
123.1.53.94.in-addr.arpa	name = 94-53-1-123.next-gen.ro.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
193.70.32.148	attackbotsspam	2019-07-28T10:07:21.369244enmeeting.mahidol.ac.th sshd\[30509\]: User root from ns3058468.ip-193-70-32.eu not allowed because not listed in AllowUsers 2019-07-28T10:07:21.495874enmeeting.mahidol.ac.th sshd\[30509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3058468.ip-193-70-32.eu user=root 2019-07-28T10:07:23.142254enmeeting.mahidol.ac.th sshd\[30509\]: Failed password for invalid user root from 193.70.32.148 port 37670 ssh2 ...	2019-07-28 19:12:18
218.92.0.170	attack	Mar 4 13:42:32 microserver sshd[46413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.170 user=root Mar 4 13:42:33 microserver sshd[46413]: Failed password for root from 218.92.0.170 port 54669 ssh2 Mar 4 13:42:37 microserver sshd[46413]: Failed password for root from 218.92.0.170 port 54669 ssh2 Mar 4 13:42:39 microserver sshd[46413]: Failed password for root from 218.92.0.170 port 54669 ssh2 Mar 4 13:42:43 microserver sshd[46413]: Failed password for root from 218.92.0.170 port 54669 ssh2 Jun 16 02:20:37 microserver sshd[44784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.170 user=root Jun 16 02:20:39 microserver sshd[44784]: Failed password for root from 218.92.0.170 port 62266 ssh2 Jun 16 02:20:41 microserver sshd[44784]: Failed password for root from 218.92.0.170 port 62266 ssh2 Jun 16 02:20:44 microserver sshd[44784]: Failed password for root from 218.92.0.170 port 62266 ssh2 Jun 16 02:20:47 mi	2019-07-28 19:39:14
186.213.17.183	attack	Automatic report - Port Scan Attack	2019-07-28 19:43:59
189.90.134.252	attackspambots	Telnet/23 MH Probe, BF, Hack -	2019-07-28 19:06:06
92.245.106.242	attackbotsspam	2019-07-28 06:31:18 H=(92-245-106-242.mega.kg) [92.245.106.242]:36115 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-07-28 06:31:19 H=(92-245-106-242.mega.kg) [92.245.106.242]:36115 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/92.245.106.242) 2019-07-28 06:31:19 H=(92-245-106-242.mega.kg) [92.245.106.242]:36115 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/92.245.106.242) ...	2019-07-28 19:43:41
186.227.146.66	attackbotsspam	failed_logins	2019-07-28 19:31:28
152.250.235.45	attackbotsspam	Automatic report - Port Scan Attack	2019-07-28 19:24:23
167.71.60.104	attackspam	Port Scan detected from 167.71.60.104 (DE/Germany/-). 4 hits in the last 85 seconds	2019-07-28 19:14:37
122.152.221.72	attack	Jul 28 06:48:18 mail sshd\[5419\]: Failed password for invalid user survival from 122.152.221.72 port 33491 ssh2 Jul 28 07:04:32 mail sshd\[5805\]: Invalid user zsq123!@\# from 122.152.221.72 port 36505 ...	2019-07-28 19:15:22
95.170.205.151	attack	Jul 28 04:16:58 MK-Soft-VM6 sshd\[4372\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.170.205.151 user=root Jul 28 04:17:01 MK-Soft-VM6 sshd\[4372\]: Failed password for root from 95.170.205.151 port 30682 ssh2 Jul 28 04:22:12 MK-Soft-VM6 sshd\[4392\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.170.205.151 user=root ...	2019-07-28 19:21:09
197.159.135.49	attack	My-Apache-Badbots (ownc)	2019-07-28 18:58:28
45.116.115.177	attackspam	Automatic report - Port Scan Attack	2019-07-28 19:28:23
193.68.57.155	attack	Triggered by Fail2Ban	2019-07-28 19:13:47
106.12.58.250	attackbots	Jul 28 05:44:47 ns41 sshd[13673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.58.250	2019-07-28 18:51:14
218.92.0.182	attackbots	Jul 28 10:55:41 debian64 sshd\[21095\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.182 user=root Jul 28 10:55:43 debian64 sshd\[21095\]: Failed password for root from 218.92.0.182 port 31093 ssh2 Jul 28 10:55:46 debian64 sshd\[21095\]: Failed password for root from 218.92.0.182 port 31093 ssh2 ...	2019-07-28 19:29:24

Recently Reported IPs

243.213.177.2	139.8.112.86	167.63.61.53	209.169.149.245
61.147.46.177	22.86.171.26	208.138.17.4	108.24.114.55
28.179.177.14	187.158.175.218	49.212.129.243	192.168.1.20
85.101.47.90	10.109.5.232	53.38.92.27	138.197.146.75
27.50.165.42	77.227.196.49	31.172.45.134	71.54.120.103